Privacy Policy

• We ask for an email address and a password. That is the whole sign-up.
• We never see your card details. PayPal takes the payment and tells us only that it worked.
• We do not sell personal data, share it for advertising, or buy it to enrich your profile.
• Analytics is off until you allow it, and it is cookieless either way.
• You can download everything we hold, or delete the account outright, from Settings. No email, no waiting.

PipeLineHub operates PipeLineHub and decides how the data described here is used, which makes it the controller of it. Write to amoriasim2010@gmail.com about anything on this page. Our full business details are on the Business details page.

This is the complete list. It is generated from the same file the app uses to build your data export, so it cannot fall out of date without the export breaking too.

We collect nothing beyond this. There is no phone number field, no company-size question, no job title, no address and no marketing-preferences record, because none of them is needed to run any of it. The Site Monitor asks for one email address, for the alerts you asked to receive, and nothing else.

The free tools keep no account data at all. The Website Audit stores the address you audited and the public findings about that site for 90 days, so its share link keeps working, but not who ran it: no account, no IP address, no email. The free website check stores nothing. To stop one visitor from overloading them, both tools count requests per visitor using a one-way scrambled key that is never written down and is useless once the server restarts.

Where a legal basis is required, ours is one of these:

• To perform our contract with you — your account, your subscription, and the scans and alerts you paid for. Without this data there is no service to give you.
• Your consent — page-view analytics, and only that. You can withdraw it at any time from the cookie settings, and withdrawing it changes nothing else.
• Our legitimate interests — keeping the service secure and working, which covers short-lived server logs and the per-visitor limits that stop the free tools being abused.
• A legal obligation — keeping proof of payments we received, for as long as tax law requires.

We never rely on legitimate interests to send you marketing, and we do not make automated decisions that have a legal or similarly significant effect on you.

Three kinds, and every one of them is something you asked for:

• Service email — sign-in and password-reset links, a Site Monitor verification code, and notices about your subscription. These cannot be unsubscribed from while the account is open, because they are how the account works. Deleting the account stops them.
• Site Monitor alerts — the findings you bought. Every one carries a one-click unsubscribe link and the header your mail app uses for its own unsubscribe button. Using it stops the alerts without touching your subscription or your account.

• The free weekly leads email — three companies from the vault every Friday, if you asked for it on this page or in the offer shown when leaving the site. We email a confirmation link first and send nothing until you use it, so nobody can sign up an address they don’t own. Every issue has a one-click unsubscribe link and the header your mail app turns into its own button, and unsubscribing deletes your address rather than flagging it. We keep the address, when you joined, and which issue you last received; nothing else, and it is never linked to an account.

We send no other marketing. We do not sell or share the list, and we do not add anyone to it who did not ask and confirm.

9 service providers, each doing one job we cannot do ourselves. The Subprocessors page names every one of them, exactly what each receives, and where it is processed. Several are in the United States, so using PipeLineHub involves a transfer there.

Beyond them we disclose personal data only if the law requires it, or if the business is sold, in which case the buyer is bound by this policy and you are told before anything moves.

We do not sell personal data, and we do not share it for cross-context behavioural advertising, as those terms are used in US state privacy laws.

The Lead Vault holds business contact details that companies publish themselves: a company name, a public work inbox, a website, and the problem we found on it. It is business information gathered from public pages, and it is never built from our customers or from anything you do here.

If you represent a listed company and want it removed, email us from an address on that company’s domain and we will delist it and not re-add it. The Data requests page has a prepared message.

One sign-in cookie, a few local preferences, and optional analytics that stays off until you allow it. Every item is listed in the Cookie Policy, which is also where you can change your answer.

PipeLineHub is a business tool sold to businesses. It is not directed at children, and you must be at least 18 to open an account. We do not knowingly collect data from children, and we have no feature that would ask for a birthday, a school or a parent’s details. If you believe a child has created an account, email amoriasim2010@gmail.com and we will delete it and everything attached to it, without asking for more detail than we need to find it.

You can get a copy of your data, correct it, delete it, take it elsewhere, or object to a use of it. Two of those you can do right now without asking anyone: Download my data and Delete my account are in Settings.

For anything else, email amoriasim2010@gmail.com. Verified requests are completed within 30 days, free of charge. We will never make you cancel by phone, sit through a retention offer, or explain why. The Data requests page walks through each one.

If you are not happy with our answer you can complain to your local data-protection authority. Nothing here limits that.

Deleting the account removes every row in the table above. Three things outlive it, and you should know which:

• Payment records held by PayPal. PayPal is the merchant of record for your payments and keeps its own transaction history. We cannot delete it, and neither can you. Kept: as set by paypal and by the tax law that applies to it.
• Our record that a payment happened: amount, date and subscription ID. Tax and accounting law requires a business to keep proof of the income it received. Kept: as long as the law requires, then deleted.
• Server logs. Our host records requests (address, time, IP) for security and debugging. They are not account records and are not searchable by account. Kept: rotated out by the host on its own short schedule.

Data is encrypted in transit. Passwords are hashed by Supabase Auth and are never visible to us. Every table is protected by row-level security, so one account cannot read another’s rows even if application code were wrong. Lead contact addresses sit behind a database function rather than a readable column, and the Site Monitor worker runs with a short-lived token instead of a database key.

If we change something that affects you, we will say so on this page and, for material changes, by email before it takes effect. The date at the top is when this version was published.